Unable to find Quarantined file in Investigate or DLP Enforce

Products

• CASB Securlet SAAS
• CASB Advanced Threat Protection
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS With DLP-CDS

Issue/Introduction

File named "example.xls" contained sensitive content and was quarantined but not easily found in CASB Investigate or DLP Enforce incidents by the file name

Cause

File named "example.xls" did contain the sensitive content but was inside "example.zip" file along with two other clean files

Resolution

If sensitive content triggers an incident watch for it being inside a zip file. Further research may need to be done searching on the zip file name